search

kongo86 / pefile

Automatically exported from code.google.com/p/pefile
Other
0 stars 0 forks source link

PEiD signature match #5

Closed GoogleCodeExporter closed 9 years ago

GoogleCodeExporter commented 9 years ago 
I originally posted this as a comment in the wiki, but was wondering if
this would be a better place.

The ability to match PE signatures is definitely a useful addition to the
great library that is pefile, however, I believe that UserDB.txt only
includes all external PEiD signatures and thus using this file would miss
out on the 600 sigs that PEiD detects internally. 

Am I missing something? Is there a comprehensive UserDB.txt file floating
around out there - or are these internal signatures held under lock and key?

Thanks.

Original issue reported on code.google.com by ed.murph...@gmail.com on 12 Aug 2008 at 9:18

GoogleCodeExporter commented 9 years ago 
PEiD's signatures are embedded inside the application. It's authors have done 
so to prevent unauthorized use by 
third party tools. The UserDB.txt file is the best one I could find freely 
available.
Any suggestions for additional sources are welcome.
Also, you might want to try contacting the PEiD authors to request an improved 
signature database.

Original comment by ero.carr...@gmail.com on 2 Jan 2009 at 1:06